Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/hbmQ_G3fPa7CCkk-jq5zlzk9ikQ.roa
File:                     hbmQ_G3fPa7CCkk-jq5zlzk9ikQ.roa (raw, json)
Hash identifier:          CwUJZDJcRG66i3mH/5DhoXzoQtzWyIRgBnkuUGgYOB8=
Subject key identifier:   85:B9:90:FC:6D:DF:3D:AE:C2:0A:49:3E:8E:AE:73:97:39:3D:8A:44
Certificate issuer:       /CN=1d0871fc2e99892ea1115a302138e1d32a62182c
Certificate serial:       018CC26D7FED3ADD0555F3F10746B5D50DCC
Authority key identifier: 1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/hbmQ_G3fPa7CCkk-jq5zlzk9ikQ.roa
Signing time:             Mon 01 Jan 2024 00:30:05 +0000
ROA not before:           Mon 01 Jan 2024 00:30:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204512
IP address blocks:        185.118.108.0/24 maxlen: 24
                          2a0e:9000::/32 maxlen: 32
                          2a0e:9000:1::/48 maxlen: 48
                          2a0e:9000:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:7f:ed:3a:dd:05:55:f3:f1:07:46:b5:d5:0d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0871fc2e99892ea1115a302138e1d32a62182c
        Validity
            Not Before: Jan  1 00:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=85b990fc6ddf3daec20a493e8eae7397393d8a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:2f:7d:f4:3d:cd:d9:c2:39:1b:30:e1:3a:
                    e6:27:81:c3:08:9d:c5:c3:12:a7:b7:19:c0:28:9c:
                    54:4a:d8:2d:6c:9d:4e:2c:6d:fa:1b:b6:be:d1:d3:
                    56:3e:28:80:76:d2:7d:39:d3:40:a7:96:cf:8d:9f:
                    36:a3:14:cf:4b:91:da:de:19:71:2a:f1:d0:48:a6:
                    4a:40:9c:e2:d2:8b:7e:4e:e1:f9:e3:6a:1f:7e:d3:
                    4f:e5:92:19:29:0c:d2:ad:18:2e:97:21:25:22:0f:
                    89:c3:9b:ad:77:37:25:ed:d4:37:9a:c9:09:57:81:
                    71:a3:98:f6:b4:1b:7b:3b:f8:1f:c8:89:8f:01:59:
                    f9:49:c4:f5:48:19:b0:2d:0d:9b:db:ac:1f:9b:1d:
                    73:b5:4d:a4:d9:fd:7b:1c:31:16:0b:e6:b7:a8:ee:
                    c6:62:60:b1:23:f2:07:8e:4f:7c:f5:6a:e5:f8:ba:
                    77:ad:0d:48:57:f8:1e:ae:24:dd:86:91:12:da:65:
                    d0:a9:ce:df:80:4d:b2:25:22:5c:83:9f:3b:21:2c:
                    76:82:72:cf:39:7a:23:c6:94:2d:59:9e:57:05:22:
                    67:35:29:74:15:7a:35:74:93:03:04:21:04:46:6d:
                    67:c7:42:85:b3:07:63:31:1e:0e:c2:8b:1f:b0:3d:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B9:90:FC:6D:DF:3D:AE:C2:0A:49:3E:8E:AE:73:97:39:3D:8A:44
            X509v3 Authority Key Identifier:
                keyid:1D:08:71:FC:2E:99:89:2E:A1:11:5A:30:21:38:E1:D3:2A:62:18:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQhx_C6ZiS6hEVowITjh0ypiGCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/hbmQ_G3fPa7CCkk-jq5zlzk9ikQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/205275-2ced-4a4e-b900-4f3e5b2e0c56/1/HQhx_C6ZiS6hEVowITjh0ypiGCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.108.0/24
                IPv6:
                  2a0e:9000::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:5a:6d:44:05:32:da:1b:b1:13:7c:e1:98:4c:7b:6a:fe:7e:
         0a:fa:3e:63:0e:fb:7e:fa:65:c5:e5:d6:87:69:e5:9b:f9:f7:
         20:c8:a8:5a:18:17:a8:94:bb:30:3f:12:33:d1:7c:4d:7f:c6:
         f6:ba:72:7e:84:c8:3f:0b:7f:bf:d4:9d:55:5c:f6:e4:87:a1:
         c3:c2:d8:eb:0e:df:a0:97:3c:48:c7:49:44:f6:7c:6d:7a:6a:
         a0:eb:6b:24:17:4c:f0:e9:85:29:94:54:19:e0:6e:4d:f5:a3:
         fb:94:ea:65:71:8b:a4:d8:45:7c:f2:9b:41:3f:9c:c9:3e:cb:
         7d:39:50:44:f3:97:36:5d:23:b7:0f:17:25:23:70:a2:ea:c5:
         a4:b0:d2:94:ae:fb:ff:f5:35:eb:eb:27:f3:f8:4b:67:43:31:
         a3:15:cf:3c:1d:41:14:73:55:73:73:5e:ea:2b:4b:a7:3b:18:
         65:30:da:d6:6c:f8:c1:30:ba:22:0f:01:76:ee:2c:c2:0b:a4:
         dd:ef:9c:d7:4b:5c:3a:b4:92:b6:47:a3:4e:92:81:67:66:67:
         02:fc:6c:a0:26:90:82:bb:e6:77:34:3f:4f:3b:43:4c:36:88:
         11:7f:6f:4f:7b:e0:6f:00:ee:16:02:0b:cb:eb:f6:41:2a:fc:
         19:55:21:db
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzCbX/tOt0FVfPxB0a11Q3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDg3MWZjMmU5OTg5MmVhMTExNWEzMDIxMzhlMWQzMmE2
MjE4MmMwHhcNMjQwMTAxMDAzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWI5OTBmYzZkZGYzZGFlYzIwYTQ5M2U4ZWFlNzM5NzM5M2Q4YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCgvffQ9zdnCORsw4TrmJ4HDCJ3F
wxKntxnAKJxUStgtbJ1OLG36G7a+0dNWPiiAdtJ9OdNAp5bPjZ82oxTPS5Ha3hlx
KvHQSKZKQJzi0ot+TuH542offtNP5ZIZKQzSrRgulyElIg+Jw5utdzcl7dQ3mskJ
V4Fxo5j2tBt7O/gfyImPAVn5ScT1SBmwLQ2b26wfmx1ztU2k2f17HDEWC+a3qO7G
YmCxI/IHjk989Wrl+Lp3rQ1IV/geriTdhpES2mXQqc7fgE2yJSJcg587ISx2gnLP
OXojxpQtWZ5XBSJnNSl0FXo1dJMDBCEERm1nx0KFswdjMR4OwosfsD0MGQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIW5kPxt3z2uwgpJPo6uc5c5PYpEMB8GA1UdIwQY
MBaAFB0IcfwumYkuoRFaMCE44dMqYhgsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAt
NGYzZTViMmUwYzU2LzEvaGJtUV9HM2ZQYTdDQ2trLWpxNXpsems5aWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yMDUyNzUtMmNlZC00YTRlLWI5MDAtNGYzZTViMmUwYzU2
LzEvSFFoeF9DNlppUzZoRVZvd0lUamgweXBpR0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXZsMA0E
AgACMAcDBQAqDpAAMA0GCSqGSIb3DQEBCwUAA4IBAQArWm1EBTLaG7ETfOGYTHtq
/n4K+j5jDvt++mXF5daHaeWb+fcgyKhaGBeolLswPxIz0XxNf8b2unJ+hMg/C3+/
1J1VXPbkh6HDwtjrDt+glzxIx0lE9nxtemqg62skF0zw6YUplFQZ4G5N9aP7lOpl
cYuk2EV88ptBP5zJPst9OVBE85c2XSO3DxclI3Ci6sWksNKUrvv/9TXr6yfz+Etn
QzGjFc88HUEUc1Vzc17qK0unOxhlMNrWbPjBMLoiDwF27izCC6Td75zXS1w6tJK2
R6NOkoFnZmcC/GygJpCCu+Z3ND9PO0NMNogRf29Pe+BvAO4WAgvL6/ZBKvwZVSHb
-----END CERTIFICATE-----